Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
File:                     644F9AE827627B0357D7972FE08D569A0CB97C31.mft (raw, json)
Hash identifier:          g6h+nvdmZTZVW+aXIRQXJJs4SKckVbV4C0qMKff1+tA=
Subject key identifier:   A2:DB:5E:A9:59:73:43:A3:D7:6A:FE:47:46:90:BF:F2:CA:FC:C1:FD
Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
Certificate issuer:       /CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Certificate serial:       47FAD84D8EBC4D3A33F293E2F88242C0D2CC0769
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
Manifest number:          56
Signing time:             Tue 14 Jul 2026 10:16:03 +0000
Manifest this update:     Tue 14 Jul 2026 10:11:02 +0000
Manifest next update:     Wed 15 Jul 2026 12:54:02 +0000
Files and hashes:         1: 644F9AE827627B0357D7972FE08D569A0CB97C31.crl (hash: Pw2A4NVNl7IyPU/0Pl9s5uwKbv+EKd6sniLO5n64o1c=)
                          2: 323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa (hash: QKXGlT0gawntujhSrweVLVCzEtXKFPE949OqugYMNTI=)
                          3: 3131392e33382e3139322e302f32302d3230203d3e203338333637.roa (hash: niXTpol86vmz6DcPKGxvQoGJAvpzazIgo8KhQW4C54k=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fa:d8:4d:8e:bc:4d:3a:33:f2:93:e2:f8:82:42:c0:d2:cc:07:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31
        Validity
            Not Before: Jul 14 10:11:02 2026 GMT
            Not After : Jul 15 12:54:02 2026 GMT
        Subject: CN=A2DB5EA9597343A3D76AFE474690BFF2CAFCC1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a0:e8:18:e4:d0:7e:54:34:20:97:07:ac:92:
                    33:3b:06:e2:0b:0b:92:0f:35:38:60:5d:a5:95:ff:
                    41:28:0f:3d:1f:0d:6e:fe:98:bc:2f:92:ba:b9:1d:
                    2f:90:3a:12:12:e7:b0:7a:d3:a5:e1:4a:82:67:c1:
                    15:10:a1:1f:3b:fa:69:8b:f8:f2:32:45:2b:b0:f4:
                    93:42:a7:1a:3d:5d:d8:58:79:ef:63:79:6b:cd:f7:
                    11:84:66:68:8d:1f:0c:ff:f3:44:f0:a5:9a:fd:7f:
                    e7:79:47:84:e3:94:87:a1:b8:5c:e6:87:ad:08:2b:
                    bd:d1:56:f6:1e:eb:e6:7a:b2:d6:f3:09:cf:3f:f4:
                    5f:41:dc:d6:cf:92:13:73:cb:9a:d7:e5:a4:e0:50:
                    16:de:3e:43:a9:0c:a2:a0:cb:57:bc:55:eb:34:91:
                    3f:ad:ae:da:0f:77:8e:3a:87:75:99:49:94:9e:41:
                    3c:41:98:7e:bd:44:6b:a9:79:11:61:ec:ab:59:02:
                    6e:70:b3:30:a5:93:32:a0:3c:26:9d:2b:3b:3e:88:
                    f1:46:a0:8b:af:31:43:dd:14:54:33:00:35:fe:7a:
                    57:40:0c:f3:d2:aa:28:17:fa:8e:cd:f6:ab:74:2e:
                    57:8a:97:8c:fc:fa:e7:6c:01:77:19:f5:34:87:3a:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DB:5E:A9:59:73:43:A3:D7:6A:FE:47:46:90:BF:F2:CA:FC:C1:FD
            X509v3 Authority Key Identifier:
                keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e7:89:77:dd:42:e9:56:cb:3e:88:47:6f:55:ef:99:d7:e3:
         54:bb:82:12:9d:ef:1c:5a:a8:25:69:c3:27:a9:e8:b0:6c:bd:
         47:05:f0:9e:51:58:4d:ac:95:e2:ac:49:b5:14:4d:5a:bb:14:
         ea:b1:db:ef:91:e3:64:df:6f:25:f1:08:fe:d0:76:79:92:c4:
         e8:22:28:05:d5:15:42:67:31:a4:38:d4:4d:5a:fe:5a:c0:67:
         9f:1e:d9:75:40:dc:36:7a:d2:42:9e:e8:c4:e3:49:25:24:40:
         cb:ae:4e:3e:55:f5:d6:1a:5c:d8:31:94:fd:99:37:46:ab:01:
         36:cd:8d:5c:5b:2d:70:31:24:59:90:40:f3:af:24:78:08:05:
         c1:4c:fb:8b:9f:62:5f:a1:e0:9a:d8:9f:4b:c3:60:55:eb:5c:
         49:74:37:b4:22:ad:ae:54:39:ef:0a:e1:2d:b2:2f:ca:65:56:
         5a:d0:4b:43:c5:fc:0c:dd:d8:fd:28:35:3d:88:85:86:bd:d6:
         c7:13:4a:35:15:47:eb:32:13:d0:9c:94:bc:78:99:31:d2:37:
         16:3c:33:7e:92:27:03:07:8b:91:fa:b7:9a:f3:9c:06:64:0a:
         e6:c7:b3:00:34:13:ee:56:3d:2f:21:94:31:bc:46:d0:94:9d:
         47:cd:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:05 2026 by rpki-client